Privacy Policy
Last updated:
PRIVACY POLICY
Article 1 — Identification of the data controller
The controller of the personal data collected on merka.world is:
Pauline Gayat
Sole proprietor
15 rue Freycinet, 75016 Paris, France
SIREN: 831 779 236
Email: pauline@merka.world
Hereinafter referred to as "Merka".
Article 2 — Data collected
Merka collects the following personal data:
2.1 — When you sign up
— Email address
— Password (encrypted, never readable by Merka)
— First and last name (optional)
2.2 — When payment is made
— Banking data (credit card): processed exclusively by Stripe, never by Merka
— Billing address
— Country
2.3 — When browsing
— IP address
— Browser and device type
— Pages visited and time spent on site (via analytics cookies)
2.4 — For the newsletter (optional)
— Email address
— Editorial preferences (followed categories)
Article 3 — Purposes of processing
Data are collected in order to:
— Enable the creation and management of the Member account
— Process subscription payments
— Deliver the editorial service (access to Premium sheets)
— Send the weekly newsletter (with consent)
— Improve the service through usage statistics
— Comply with legal obligations (invoicing, accounting)
— Communicate with the Member (support, important information)
Article 4 — Legal basis for processing
The processing of personal data is based on:
— Performance of the subscription contract (GDPR Article 6.1.b)
— The Member's explicit consent for the newsletter (GDPR Article 6.1.a)
— Legal accounting retention obligations (GDPR Article 6.1.c)
— Merka's legitimate interest in usage statistics (GDPR Article 6.1.f)
Article 5 — Processors and recipients
The data are transferred to the following processors, under data processing agreements compliant with the GDPR:
— Stripe (payment) — registered office: Ireland
— Memberstack (account management) — registered office: United States (standard contractual clauses signed)
— Framer (hosting) — registered office: Netherlands
— Substack (newsletter, optional) — registered office: United States (standard contractual clauses signed)
No data are resold to third parties for commercial purposes.
Article 6 — Retention period
Data are retained:
— For as long as the subscription remains active
— 3 years after the end of the contractual relationship for prospecting data
— 10 years for accounting and invoicing documents (legal obligation)
— Until unsubscribing for newsletter data
Beyond that, the data are anonymized or deleted.
Article 7 — Member rights
In accordance with the GDPR and the French Data Protection Act, the Member has the following rights:
— Right of access to personal data
— Right to rectification of data
— Right to erasure ("right to be forgotten")
— Right to restriction of processing
— Right to data portability
— Right to object to processing
— Right to withdraw consent at any time
— Right to lodge a complaint with the CNIL
To exercise these rights, the Member may write to pauline@merka.world and provide proof of identity. A response will be provided within a maximum of one month.
For any complaint: Commission Nationale de l'Informatique et des Libertés (CNIL), 3 place de Fontenoy, 75007 Paris — www.cnil.fr
Article 8 — Cookies
The merka.world site uses cookies to:
— Maintain the login session (essential cookies)
— Measure audience traffic (analytics cookies)
— Improve the user experience (preference cookies)
The Member may configure or refuse cookies at any time through the settings of their browser, or via the consent banner displayed on the site.
Article 9 — Security
Merka implements technical and organizational measures to protect personal data:
— Encryption of data in transit (HTTPS)
— Passwords stored in encrypted form
— Access to data restricted to the data controller alone
— Processors compliant with the GDPR
Article 10 — Transfers outside the European Union
Some processors (Memberstack, Substack) are located in the United States. Transfers are governed by the European Commission's standard contractual clauses, ensuring a level of protection equivalent to the GDPR.
Article 11 — Changes
Merka reserves the right to amend this Privacy Policy. Any material change will be notified to Members by email.
Article 12 — Contact
For any question relating to this Privacy Policy or to the processing of your personal data, contact:
pauline@merka.world
Last updated: April 27, 2026